Changeset 628 for trunk/grails-app/controllers/ContactDetailedController.groovy

Timestamp:

Jul 14, 2010, 1:18:53 PM (15 years ago)

Author:

gav

Message:

Full authorisation review.
Add manager role to BaseController.
Remove inventory manager role from CostCode controller as per ticket #77.
Remove inventory manager role from InventoryGroup controller CUD actions.
Add all manager roles to Address and Contact controllers.
Add production and task manager roles to ProductionReference controller.

File:

• trunk/grails-app/controllers/ContactDetailedController.groovy (modified) (3 diffs)

trunk/grails-app/controllers/ContactDetailedController.groovy

@@ -1 +1 @@
 import org.codehaus.groovy.grails.plugins.springsecurity.Secured
 
-@Secured(['ROLE_AppAdmin', 'ROLE_Manager'])
+@Secured(['ROLE_AppAdmin', 'ROLE_Manager', 'ROLE_TaskManager',
+                    'ROLE_InventoryManager', 'ROLE_AssetManager', 'ROLE_ProductionManager'])
 class ContactDetailedController extends BaseController {
 
     def contactService
 
-    @Secured(['ROLE_AppAdmin', 'ROLE_Manager', 'ROLE_AppUser'])
+    @Secured(['ROLE_AppAdmin', 'ROLE_Manager', 'ROLE_TaskManager',
+                        'ROLE_InventoryManager', 'ROLE_AssetManager', 'ROLE_ProductionManager', 'ROLE_AppUser'])
     def index = { redirect(action:list,params:params) }
 
@@ -12 +14 @@
     static allowedMethods = [delete:'POST', save:'POST', update:'POST']
 
-    @Secured(['ROLE_AppAdmin', 'ROLE_Manager', 'ROLE_AppUser'])
+    @Secured(['ROLE_AppAdmin', 'ROLE_Manager', 'ROLE_TaskManager',
+                        'ROLE_InventoryManager', 'ROLE_AssetManager', 'ROLE_ProductionManager', 'ROLE_AppUser'])
     def list = {
         params.max = Math.min( params.max ? params.max.toInteger() : 10,  100)
@@ -18 +21 @@
     }
 
-    @Secured(['ROLE_AppAdmin', 'ROLE_Manager', 'ROLE_AppUser'])
+    @Secured(['ROLE_AppAdmin', 'ROLE_Manager', 'ROLE_TaskManager',
+                        'ROLE_InventoryManager', 'ROLE_AssetManager', 'ROLE_ProductionManager', 'ROLE_AppUser'])
     def show = {
         def contactInstance = Contact.get( params.id )